ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    SysLog Forwarding for XenServer

    IT Discussion
    rsyslog xenserver logging kibana elk elasticsearch
    10
    110
    21.8k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • DustinB3403D
      DustinB3403 @BRRABill
      last edited by

      @BRRABill said in SysLog Forwarding for XenServer:

      @DustinB3403 said in SysLog Forwarding for XenServer:

      So what would be a good aggregation tool to be able to view the logs?

      If Splunk stops at a tiny level..... I won't bother with it.

      500MB per day.

      yeah that's worthless......

      BRRABillB 2 Replies Last reply Reply Quote 0
      • BRRABillB
        BRRABill @DustinB3403
        last edited by

        @DustinB3403 said

        yeah that's worthless......

        Not for me! 🙂

        1 Reply Last reply Reply Quote 0
        • BRRABillB
          BRRABill @DustinB3403
          last edited by

          @DustinB3403 said

          yeah that's worthless......

          You'll want to avoid logg.ly before someone recommends it, then. That is 200MB per day.

          1 Reply Last reply Reply Quote 0
          • DustinB3403D
            DustinB3403
            last edited by

            So elk/logstash then?

            Wasn't there a post around here by scott on how to set this up?

            DanpD 1 Reply Last reply Reply Quote 1
            • DustinB3403D
              DustinB3403
              last edited by

              Has anyone setup syslog with Elk (with Elasticsearch 2.3 or greater) and Kibana

              scottalanmillerS 1 Reply Last reply Reply Quote 0
              • DanpD
                Danp @DustinB3403
                last edited by

                @DustinB3403 Maybe one of these?

                DustinB3403D 1 Reply Last reply Reply Quote 0
                • DustinB3403D
                  DustinB3403 @Danp
                  last edited by

                  @Danp said in SysLog Forwarding for XenServer:

                  @DustinB3403 Maybe one of these?

                  I was actually just looking at that and Kibana...

                  I'm trying to determine if I can run it locally or if I need a DO account to do it...

                  1 Reply Last reply Reply Quote 0
                  • scottalanmillerS
                    scottalanmiller @DustinB3403
                    last edited by

                    @DustinB3403 said in SysLog Forwarding for XenServer:

                    Has anyone setup syslog with Elk (with Elasticsearch 2.3 or greater) and Kibana

                    I'm pretty sure my walkthrough covers that.

                    DustinB3403D 1 Reply Last reply Reply Quote 0
                    • DustinB3403D
                      DustinB3403 @scottalanmiller
                      last edited by

                      @scottalanmiller This one, correct?

                      scottalanmillerS 1 Reply Last reply Reply Quote 0
                      • scottalanmillerS
                        scottalanmiller @DustinB3403
                        last edited by

                        @DustinB3403 said in SysLog Forwarding for XenServer:

                        @scottalanmiller This one, correct?

                        Yes

                        1 Reply Last reply Reply Quote 0
                        • BRRABillB
                          BRRABill
                          last edited by

                          Let me know how it goes. I'd love to install another free server around here.

                          TAKE THAT MICROSOFT!

                          1 Reply Last reply Reply Quote 1
                          • DustinB3403D
                            DustinB3403
                            last edited by

                            I'm getting stuck at

                              ./load.sh

                            with

                            Loading dashboards to http://localhost:9200 in .kibana
Loading search Cache-transactions:
curl: (7) Failed connect to localhost:9200; Connection timed out
                            1 Reply Last reply Reply Quote 0
                            • DustinB3403D
                              DustinB3403
                              last edited by

                              You know if I wasn't tired I would've noticed that @scottalanmiller made that a bash file.......

                              1 Reply Last reply Reply Quote 1
                              • DustinB3403D
                                DustinB3403
                                last edited by

                                Sadly the connection timed out still......

                                I might have to make a clean installation tomorrow and deal with it then. . . .

                                1 Reply Last reply Reply Quote 0
                                • DustinB3403D
                                  DustinB3403
                                  last edited by

                                  And filebeat is not able to be found...

                                  Ok coming back to this from my house where I can work with a beer..

                                  1 Reply Last reply Reply Quote 1
                                  • scottalanmillerS
                                    scottalanmiller
                                    last edited by

                                    Filebeat not found where?

                                    DustinB3403D 1 Reply Last reply Reply Quote 0
                                    • DustinB3403D
                                      DustinB3403 @scottalanmiller
                                      last edited by

                                      @scottalanmiller from this continuation here.

                                      https://mangolassi.it/topic/8308/configuring-logstash-and-filebeat-to-send-to-elk-logging-system

                                      1 Reply Last reply Reply Quote 0
                                      • scottalanmillerS
                                        scottalanmiller
                                        last edited by

                                        But you can't find the download?

                                        DustinB3403D 1 Reply Last reply Reply Quote 0
                                        • DustinB3403D
                                          DustinB3403 @scottalanmiller
                                          last edited by

                                          @scottalanmiller Correct, when I attempt to run the bash file, I'm responded with filebeat not found from any yum repository.

                                          1 Reply Last reply Reply Quote 0
                                          • DustinB3403D
                                            DustinB3403
                                            last edited by

                                            I'm starting a clean installation on my personal lab to test with.

                                            Should I bother with the syslog configuration before setting up Elk and LogStash?

                                            1 Reply Last reply Reply Quote 0
                                            • 1
                                            • 2
                                            • 3
                                            • 4
                                            • 5
                                            • 6
                                            • 2 / 6
                                            • First post
                                              Last post